发表于 2009-1-5 19:48
| 
鏁版嵁搴撳叆渚垫硶
鍙戝竷: 2008-7-01 12:48 | 浣滆: admin | 鏌ョ湅: 6娆
鏁版嵁搴撳叆渚垫硶
鐑
銆愬瓧浣擄細灏 澶с
鏁版嵁搴撳叆渚垫硶
浣滆咃細涓嶈 鏂囩珷鏉ユ簮锛氱綉缁 鐐瑰嚮鏁帮細675 鏇存柊鏃堕棿锛2007-1-21 
涓鑸殑web server閮借浣跨敤鏁版嵁搴撴潵瀛樺偍淇℃伅锛屽嚑涔庢墍鏈夌殑缃戠珯閮借鐢ㄦ暟鎹簱銆傝繖鏍峰氨瀛樺湪鐫涓ょ鍙兘锛屼竴绉嶆槸浣跨敤灏忓瀷鏁版嵁搴擄紝濡俛ceess,涓鑸氨鍌ㄥ瓨鍦ㄦ湰鍦般傚彟涓绉嶆槸浣跨敤澶у瀷鏁版嵁搴擄紝濡係QL server,Oracle杩欐椂鍊欎竴鑸氨鏀惧湪鍙︿竴鍙版満鍣ㄤ笂锛岀劧鍚庨氳繃ODBC鏉ヨ闂畠銆
鐢变簬椤甸潰缁忓父闇瑕佹煡璇㈠悇绉嶄俊鎭紝淇敼鐢ㄦ埛淇℃伅绛夋搷浣滐紝瀹炶川涓婂氨鏄拰鏁版嵁搴撴墦浜ら亾浜嗐傝繖鏍峰氨缁欓潪娉曠敤鎴风暀涓嬪埄鐢ㄧ殑鏈轰細浜嗐
1.瀵规湰鍦版暟鎹簱鐨勬敾鍑汇
瀵规湰鍦版暟鎹簱鐨勬敾鍑讳竴绉嶆柟娉曞氨鏄笅杞芥暟鎹簱锛岀劧鍚庡憿锛屼綘灏卞彲浠ユ墦寮杩欎釜鏁版嵁搴撳緱鍒板唴閮ㄧ殑鐢ㄦ埛鍜屽笎鍙蜂簡锛屼互鍙婂叾瀹冩湁鐢ㄧ殑淇℃伅銆
涓嬮潰浠モ滄按鑾蹭細鈥濅负渚嬶細
缁忚繃鎵弿锛屽緱鐭ww.suilian.net浣跨敤鐨勬槸铏氭嫙涓绘満锛屼娇鐢ㄧ殑鏄疻Indows NT+IIS4.0.鎵弿鍣ㄤ綘鍙互浣跨敤twwwscan鎴栬呭叾瀹冿紝鍏跺疄鍔熻兘閮藉ぇ鍚屽皬寮傘
鍦ㄥIIS鏀诲嚮鏃跺鏋滆兘澶熺湅鍒癆SP婧愪唬鐮侊紝閭ｄ箞鎴愬姛鐨勫彲鑳芥у氨寰堝ぇ浜嗐
缁忚繃娴嬭瘯锛屽彂鐜版绔欑偣瀛樺湪婧愪唬鐮佹毚闇叉紡娲炪傘傘
澶у鍙互璇曡瘯锛
http://www.suilian.net/null.htw?CiWebhitsfile=/maillist.asp%20&CiRestriction=
none&CiHiliteType=full
http://www.suilian.net/null.htw?CiWebhitsfile=/index.asp%20&CiRestriction=
none&CiHiliteType=full
http://www.suilian.net/null.htw?CiWebhitsfile=/chat/DetNew.asp%20&CiRestriction=
none&CiHiliteType=full
http://www.suilian.net/null.htw?CiWebhitsfile=/chat/detail.asp%20&CiRestriction=
none&CiHiliteType=full
http://www.suilian.net/null.htw?CiWebhitsfile=/chat/topic4.asp%20&CiRestriction=
none&CiHiliteType=full
http://www.suilian.net/null.htw?CiWebhitsfile=/chat/titlefrm.asp%20&CiRestriction=
none&CiHiliteType=full
http://www.suilian.net/null.htw?CiWebhitsfile=/chat/titlenew.asp%20&CiRestriction=
none&CiHiliteType=full
鐪嬭浜嗕粈涔堬紵
褰撶劧婧愪唬鐮佹硠闇茬殑婕忔礊鏈夊緢澶氱锛岃繖閲屽氨涓嶄竴涓鍒椾妇锛屼綘鍙互鍘绘煡婕忔礊鎵嬪唽銆
鐜板湪浣犲氨鍙互鍘绘煡鐪婣SP婧愪唬鐮佷簡銆
濡傛灉浣犲ASP涓嶇啛鎮夛紝鎴戠畝鍗曚粙缁嶄竴涓嬨
ASP鏄祵鍦<%鍜%>涔嬮棿銆備竴鑸娇鐢╒BScript鎴栬卝ava script涔﹀啓浠ｇ爜銆
鐪嬭繖涓緥瀛愪娇鐢╒BScript涔﹀啓鐨勶細
<%
...
set cn1=server.createobject("ADODB.connection")
dbpath=server.mappath("user.mdb")
cn1.open "driver={microsoft access driver (*.mdb)};dbq="&dbpath
set rs=server.createobject("ADODB.recordset")
rs.open "select * from yhb",cn1,adopenkeyset
...
%>
杩欐槸涓涓吀鍨嬬殑涓庢暟鎹簱杩炴帴鐨勪唬鐮併
渚濇鐨勬楠や负锛
寤虹珛杩炴帴瀵硅薄锛
璁剧疆鏁版嵁搴撹矾寰勶紝
鎵撳紑鏁版嵁搴擄紝
璁剧疆璁板綍瀵硅薄锛
鍙栬褰曘
杩欓噷鎴戜滑灏卞彲浠ョ煡閬撴暟鎹簱鐨勭被鍨嬶紝鍚嶇О鍜岃矾寰勶紝杩欓噷鏄湪褰撳墠鐩綍涓嬨
杩樺彲浠ョ煡閬撴暟鎹簱鐨勮〃鍚嶅拰瀛楁鍚嶇О銆
鏈夌粡楠岀殑绋嬪簭鍛樹竴鑸笉浼氭妸鏁版嵁搴撳悕鐩存帴鏀惧湪浠ｇ爜閲岋紝鑰屾槸鍦∣DBC閲岃缃暟鎹簮锛屼互澧炲姞瀹夊叏鎬с
鐒跺悗灏卞彂鐜板瓨鍦
d:\S\suilian\chat\news.mdb
d:\S\suilian\topic22.mdb绛夋暟鎹簱
浣犲彧瑕佷娇鐢
http://www.suilian.net/chat/news.mdb
http://www.suilian.net/topic22.mdb
灏卞彲浠ユ妸瀹冧笅杞戒笅鏉...
1銆傜獊鐮磗cript鐨勯檺鍒躲
渚嬪锛屾煇缃戦〉涓婃湁涓鏂囨湰妗嗭紝鍏佽浣犺緭鍏ョ敤鎴峰悕绉帮紝浣嗘槸瀹冮檺鍒朵綘鍙兘杈撳叆4涓瓧绗︺傝澶氱▼搴忛兘鏄湪瀹㈡埛绔檺鍒讹紝鐒跺悗鐢╩sgbox寮瑰嚭閿欒鎻愮ず銆傚鏋滀綘鏀诲嚮鏃堕渶瑕佺獊鐮存闄愬埗锛屽彧闇瑕佸湪鏈湴鍋氫竴涓竴鏍风殑涓婚〉锛屽彧鏄彇娑堜簡闄愬埗锛岄氬父鏄幓鎺塚Bscript鎴朓avaScript鐨勯檺鍒剁▼搴忥紝灏卞彲浠ユ垚鍔熺獊鐮淬
濡傛灉鏄痡ava script鍋氱殑锛屽共鑴嗕复鏃舵妸娴忚鍣ㄧ殑鑴氭湰鏀寔鍏虫帀銆傚鏋滄槸
鏈夌粡楠岀殑绋嬪簭鍛樺父甯稿湪绋嬪簭鍚庡彴鍐嶅仛涓閬嶆楠岋紝濡傛灉鏈夐敊璇氨鐢╮esponse.write鎴栫被浼肩殑璇彞杈撳嚭閿欒銆
2銆傚SQL鐨勭獊鐮
渚嬪鏌愮綉椤甸渶瑕佷綘杈撳叆鐢ㄦ埛鍚嶇О鍜屽彛浠わ紝杩欐牱灏辨湁涓や釜鏂囨湰妗嗙瓑寰呬綘鐨勮緭鍏ワ紝鐜板湪鎴戜滑鍋囪鏈変竴鐢ㄦ埛adam,鎴戜滑涓嶇煡閬撲粬鐨勫彛浠わ紝鍗存兂浠ヤ粬鐨勮韩浠界櫥闄嗐
姝ｅ父鎯呭喌涓嬶紝鎴戜滑鍦ㄧ涓涓枃鏈杈撳叆adam,绗簩涓枃鏈杈撳叆1234涔嬬被鐨勫瘑鐮侊紝濡傛灉瀵嗙爜姝ｇ‘灏卞彲浠ヨ繘鍏ワ紝鍚﹀垯鎶ラ敊銆
绋嬪簭涓殑鏌ヨ璇彞鍙兘鏄細
sql="select * from user where username='"&text1.values&"' and passwd= '"&text2.values&"'"
鎵ц鏃跺欏氨鏄
select * from user where username='adam' and passwd='1234'
濂戒簡锛
濡傛灉鎴戜滑鍦╰ext2閲岃緭鍏ョ殑涓嶆槸1234,鑰屾槸1234'"&"'or 1=1
